Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/llZv2JzopIsKXAYVGT34S3G15ss.roa
File: llZv2JzopIsKXAYVGT34S3G15ss.roa (raw, json)
Hash identifier: 29/L6PJMKR12qKXS4tpnpqeL+557EnnATfP/1K57EUs=
Subject key identifier: 96:56:6F:D8:9C:E8:A4:8B:0A:5C:06:15:19:3D:F8:4B:71:B5:E6:CB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186986909DD52EC60B9AE46D4E5AE9F2F75
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/llZv2JzopIsKXAYVGT34S3G15ss.roa
Signing time: Tue 28 Feb 2023 14:24:25 +0000
ROA not before: Tue 28 Feb 2023 14:24:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204770
IP address blocks: 88.216.210.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
84.32.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:69:09:dd:52:ec:60:b9:ae:46:d4:e5:ae:9f:2f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 28 14:24:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96566fd89ce8a48b0a5c0615193df84b71b5e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:58:fc:1c:48:36:19:7d:2a:4f:5c:e5:4f:
a1:99:e1:44:0c:19:ea:97:c1:43:d1:93:59:8c:b0:
a0:4b:1a:46:a1:a4:2b:27:6d:04:f5:dd:35:d5:11:
ad:4c:55:86:ab:17:83:c5:c7:71:77:bc:8f:9d:69:
b2:05:2c:2d:e1:50:26:32:ec:54:9f:d8:f2:dd:ce:
06:a7:3a:14:39:85:5c:9e:6b:7a:20:8b:d5:b4:73:
ee:02:eb:90:b1:00:a7:7d:5b:c9:04:fe:d1:1e:81:
93:f6:28:50:cc:3d:cc:ee:ab:ee:35:8e:0b:53:80:
13:a0:46:89:cd:e1:85:9e:e2:9b:e8:e7:19:5e:9a:
8d:06:18:bb:c5:0b:48:50:d9:04:00:72:55:97:f5:
c8:0c:8d:6a:fd:0f:ca:db:a4:4c:54:b6:bb:b0:a4:
0e:d3:d4:39:44:0c:24:46:b6:5d:98:3a:f1:6a:88:
7b:21:9e:97:d5:72:64:fa:ac:99:18:23:64:17:ae:
01:1a:99:8b:fe:8b:d1:20:20:fb:53:e3:75:e1:1c:
21:23:c4:be:7d:15:3b:35:04:48:ee:fb:7a:96:1c:
28:70:08:0b:e4:33:86:20:5e:44:00:db:6d:f9:e5:
3b:6c:bd:a6:87:72:94:cd:7e:92:b0:84:28:94:1e:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:6F:D8:9C:E8:A4:8B:0A:5C:06:15:19:3D:F8:4B:71:B5:E6:CB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/llZv2JzopIsKXAYVGT34S3G15ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.34.0/24
84.32.128.0/22
88.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6f:e2:54:ee:22:ed:8e:4d:c0:2e:0f:e7:b1:bf:6d:59:5b:
14:d4:25:a3:6f:ab:d4:fb:2d:6f:32:fb:db:8d:f0:99:1a:4c:
ad:53:86:8c:4f:c9:03:72:4d:5d:1b:2a:91:b9:26:93:7c:3b:
97:b2:47:cc:81:2e:6a:e8:2f:ec:58:a9:41:09:60:a8:25:a2:
40:9c:d4:85:ad:4d:61:b7:4c:40:42:4f:0d:a6:2e:44:ec:b9:
c6:c0:a4:22:d3:55:35:73:36:e6:63:b5:e2:29:0a:0b:67:db:
be:ff:45:0c:0d:e8:ac:c9:2b:a6:b4:f9:48:be:cd:ef:60:c0:
32:97:7d:a8:38:96:dd:b5:87:8a:cc:7b:52:30:f9:14:23:22:
99:96:4a:ee:cc:e9:89:e7:e7:23:ef:97:04:ff:9b:af:8b:37:
ea:fa:70:2b:96:b7:04:3e:16:16:c8:de:a8:ed:2e:a6:5b:52:
95:c1:10:42:fa:b1:28:59:db:fa:d2:e9:13:9b:01:8b:d0:11:
cb:b3:20:0b:e5:44:26:cc:33:9b:43:4a:d9:7e:bb:96:1b:e6:
38:c5:2f:60:b3:03:1d:50:e8:f2:59:3a:62:64:f4:70:35:69:
d5:c8:75:a5:6b:46:a4:04:67:fa:b1:7a:50:1f:77:0b:f5:51:
67:8d:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org